Single sign on for File share failing through Netscaler gateway VPN
Article ID: CTX222542
Updated On:
Description
After Clicking on the File share link user is getting Authentication Prompt .
Resolution
This is an Expected behaviour on 10.1 and 10.5 57 and Above . Since the SSO name Attribute in LDAP is Not used for Peforming Single Signon on published bookmarks which are UNC file paths to shared folders .
This behavior is expected as per the current Design where we are using Session Username which is also the Server Logon Attribute for performing SSO to File shares.
Analysis:
POST /fs/login HTTP/1.1
Accept: */*
Accept-Language: en-us
Referer: https://<FQDN>.html
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; Creative AutoUpdate v1.41.07)
Host: Hostname
Content-Length: 100
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: WINGDevice="CTX_DeviceId#WI_UNqMYF9jSASe1OZvV"; NSC_AAAC=804fb5701efc8ef8b643a200dff584a10c3a01eab45525d5f4f58455e445a4a42; NSC_FSSO=1; wp10900=UTCTTDDDDDDIHIVMMJM-VCMX-XWHV-HJXZ-BTLXAUVJIKKZDYWYYHCLK-CXUI-XZCK-BKUJ-YLWKWYZLYXVVDJHssplhg_Jht; __utma=41964343.908169125.1439831399.1439831399.1439834976.2; __utmz=41964343.1439831399.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __unam=c03a8e3-14f3ca39fd0-325b0a19-3
FSSSO: _login=username&_password=userpassword_domain=userdomain
WINSIP: 0.0.0.0
FSIP: 10.x.x.x
nsc_nonce: KR6fJ0kNd1xXznng
server=%5C%5Cservername.local%5Ccommon&login=&password=&domain=&nsc_nonce=KR6fJ0kNd1xXznng
Problem Cause
Summary:This behavior is expected as per the current Design where we are using Session Username which is also the Server Logon Attribute for performing SSO to File shares.
Analysis:
POST /fs/login HTTP/1.1
Accept: */*
Accept-Language: en-us
Referer: https://<FQDN>.html
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3; Creative AutoUpdate v1.41.07)
Host: Hostname
Content-Length: 100
Connection: Keep-Alive
Cache-Control: no-cache
Cookie: WINGDevice="CTX_DeviceId#WI_UNqMYF9jSASe1OZvV"; NSC_AAAC=804fb5701efc8ef8b643a200dff584a10c3a01eab45525d5f4f58455e445a4a42; NSC_FSSO=1; wp10900=UTCTTDDDDDDIHIVMMJM-VCMX-XWHV-HJXZ-BTLXAUVJIKKZDYWYYHCLK-CXUI-XZCK-BKUJ-YLWKWYZLYXVVDJHssplhg_Jht; __utma=41964343.908169125.1439831399.1439831399.1439834976.2; __utmz=41964343.1439831399.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __unam=c03a8e3-14f3ca39fd0-325b0a19-3
FSSSO: _login=username&_password=userpassword_domain=userdomain
WINSIP: 0.0.0.0
FSIP: 10.x.x.x
nsc_nonce: KR6fJ0kNd1xXznng
server=%5C%5Cservername.local%5Ccommon&login=&password=&domain=&nsc_nonce=KR6fJ0kNd1xXznng
Was this article helpful?
Yes
No
Powered by
